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ENCLOSURE 1 
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1. Introduction . This summary report provides the results of an Army Reserve- wide, quick 
response audit of cellular telephones. This audit was requested by the Chief, Army Reserve 
(CAR), and included in the CY 00 Annual Internal Review (IR) Plan approved by the CAR on 
7 Jan 00. Also, the USARC Deputy Commanding General (DCG) directed all USARC major 
subordinate commands (MSCs) IR offices to perform this review. 

2. Objectives, Scope and Method of Review 

a. Qbiective(s) . Our overall objective was to determine whether the CAR's guidance on 
cellular telephones was being adhered to, and whether management controls were established 
and operating as intended. 

b. Scope . The scope included cellular telephones at the HQ, USARC; OCAR; AR- 
PERSCOM; and, all USARC MSCs. Subject to availability of records, the HQ and MSC IR 
auditors reviewed all cellular telephone use for the period 1 Jan 99 through 30 Mar 00. The 
audits were performed during the period Feb tlaxniigh |i^ 

c. Method of Review . The HQ and MSC IR auditors employed a variety of methods to 
review cellular telephones. At each location auditors interviewed appropriate staff personnel and 
obtained and reviewed documentation to gain an understanding of: 

• policies and procedures governing cellular telephone use; 

• cellular telephone acquisition process; 

• request, justification, and issuance of cellular telephones; 

• property accountability of cellular telephones; 

• billing and payment process of itemized cellular telephone bills; and, 

• management controls, as they relate to cellular telephones. 

d. We performed the audit in accordance with generally accepted government 
auditing standards and, accordingly, included such tests of internal controls as were considered 
necessary under the circumstances. 

3. Audit Results. We found xig ^^. 

■ ceHuIar telephones.; However/^ "^S 

published policy memoranda establisMng o^ for tihe appixaf^a^ use mid &n^ 
telephones. Thirty-one of the 36 MSCs reporting had cellular telephones within their commands. 
Twenty-two of the 31 MSCs, in addition to HQ, USARC, AR-PERSCOM, and, OCAR, reported 
findings or problems with cellular telephones. 

The auditors found specific problems as follows: 

• T^ 

justij&catibn; issue; knd use of cellular teleplKJtfes^ 
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• Eight of 22 MSCs reported no risk assessments or evaluations of management control 
weaknesses had been performed; 

• Two of the three HQs, and 7 of 22 MSCs reported a lack of accountability on 
property records; 

• Thesi^ 

tdi^3i^^ feilfe; poor reco^ 



• 



One H(|s^ and 3 of 221^^ 

telef)hones, and the agp^imnce tiiat c^^ 

rattiCT tSan necessity, 

• Unused, or seldom used, cellular telephones incurring charges were appropriately 
tumed-in and deactivated to avoid charges; 

Additionally, we found insufficient documentation to determine whether: 

• Cellular telephones were appropriately justified and issued to support only mission 
essential requirements; 

• Cellular telephones were properly hand-receipted to users. 
4. Potential Benefits 

The auditors reported a total of 1,236 cellular telephones throughout the Army Reserve with 
annual costs of $343,598, and annual estimated potential monetary benefits totaling $34,382. 
We did not specifically look for abuse of cellular telephone use, however, did find instances of 
inappropriate use and at one location received reimbursement for misuse. Cellular telephones, 
their annual costs, and potential monetary benefits, throughout the Army Reserve are illustrated 
below: 

Potential Annual 



Location 


# of CeU Phones 


Annual Costs 


Monetary Benefits 


OCAR 


93 


$12,215 


$ 4,000 


HQ, USARC 


33 


20,714 


6,904 


AR-PERSCOM 


36 


11,484 


3,134 


MSCs 


1.074 


299,185 


20,344 


Totals: 


1.236 


$343,598 


$34,382 



Our computations of potential monetary benefits are at Appendix A. 
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5. Actions Taken. We briefed the USARC CofS, the OCAR DOS, and CIO on the audit 
results, and offered suggestions for corrective actions. Additionally, the MSC IR auditors 
made numerous suggestions for corrective action to their local commanders. MSC IR 
auditors are required to follow-up on these corrected actions. The CIO concurred with the 
audit observations, conclusions, and suggestions for corrective action and on 1 Dec 00 
issued a policy memorandum on the use and safeguarding of government issued cellular 
telephones. The memorandum was addressed to Commanders, MSCs and Installations 
and USARC Directors/Chiefs and SGS and included our recommended corrective actions 
to: 

• Validate the need for currently issued cellular telephones; 

• Establish and issue a policy governing cellular telephones at OCAR, USARC, and 
AR-PERSCOM. Include in the new policy memorandum the requirement to: 

■ Establish criteria for justifying and approving the acquisition of cellular 
telephones; 

■ Require requests and justifications for cellular telephones be in writing, and 
maintained on file with the hand-receipt; 

■ Review and revalidate the need for cellular telephones every two years; 

■ Identify and turn in cellular telephones that are no longer needed, or seldom used. 
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DEPARTMENT OF THE ARMY 

OFFICE OF THE CHIEF. ARMY RESERVE 
WASHINGTON, DC 20310-2400 



REPLY TO 
ATTENTION OF 



S: 6 Sep 02 
DAAR-IR (11 -7a) 6 Aug 02 



MEMORANDUM FOR Professor Dan Wiener, II, Army Reserve Chief Information Officer, 
Office of the Chief, Army Reserve, ATTN: DAAR-CI, 2400 Army Pentagon, Washington, DC, 
20310-2400 

SUBJECT: Follow-up Audit of Cellular Telephones at OCAR, Army Reserve IR Report 24-00, 
(Report No. 2002-21) 



1. Executive Summary. Corrective actions for the three recommendations contained in the 
Army Reserve Internal Review (IR) Report (enclosed) have not been implemented. 

2- Background. The follow-up audit was conducted in accordance with ARs 11-7 and 36-2. 
The objective of the follow-up was to determine whether the OCAR CIO telecommunications 
personnel took adequate corrective actions to implement the recommendations contained in IR 
Report 24-00; Review of Cellular Telephones at OCAR, dated 18 Feb 00. The OCAR CIO 
telecommunications personnel provided the status of corrective actions initiated. However, the 
actions initiated were not adequate to close the recommendations. 

3. Scope and Method of Review. We obtained documentation to support the status of the 
recommendations and conducted interviews with appropriate CIO personnel. The follow-up 
audit was conducted during the period 1-3 May 02 and 17-20 Jun 02; and periodic work at 
OCAR and HQ, USARC through 1 Aug 02. We performed this follow-up audit in accordance 
with generally accepted government auditing standards. 

4. Status of Recommendations and Fojllow-up Results. 

Finding. No policy regarding cellu^ 

Memorandum No; 25-98-1 , ■*IJse of OG^ Cdnimunications R^sotfe^v' 1 9 Nov 97. 




Recommendation 1/ Deterni^ 
ceMarteleji&nes. I 

OCAR CIO Comments: Concur with finding and recommendation. 

FoUowMipi|:e^ufts.^^N There is^ no established poUcj^^ 

OCAk^ I^SPPB^^ they have not establi^^ a 

cellular tetepiione policy. 
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Finding. There is a lack of documentation to determine whether cellular telephones were 
appropriately justified and issued to personnel to fulfill mission requirements. 

Recommendation 2. Finalize, publish, and implement policy guidance regarding cellular 
telephones within OCAR, to include the following guidance contained in the new AR 25- 1 : 

Are criteria established for justifying and approving the acquisition of cellular telephones? 

- Has guidance been provided to review and revaUdate the need for cellular telephones every 
two years? 

- Are there procedures to identify and tum-in cellular telephones that are no longer needed or 
seldom used? 

- Has guidance been provided to review and certify itemized monthly cellxilar telephones 
bills? 

OCAR CIO Comments: Concur with finding and recommendation. 

Follow-up Results. Not Implemented. See Follow-up Results for Recommendation 1. 

Fiiidpng.nr)iter^ wei^ ii()tSp^(^^ 

' Three cellular telephones were not properly hand-receipted. 

- Efifecl^ perjfoniied olitOT^ cefflular teleplione bills to vaiid^ usage 
of celiilikr t^i^^ 

- One cellular telephone was missing. 

Recommendation 3. Implement internal controls over the issue and accountability of cellular 
telephones, to include: 

- Ensuring all cellular telephones are properly hand-receipted. 
Appropriate, written justifications are maintained with hand-receipts. 

' Perform reviews of usage^attem^^ telq)hones, based on itencnzedmoiitfily bills, 

to ideritify pc^si&le unau^ri^ 

OCAR CIO Comments: Concur with finding and reconamendation. 

Follow-up Results. Not Implemented. Cellular telephones are not properly hand-receipted. For 
example, a review of hand receipts showed that in one staff directorate an individual had a 
cellular telephone. However, when this issue was discussed with the individual, she stated a 
cellular telephone had never been issued to her. Responsible CIO personnel could not explain 
the discrepancy. Also, appropriate justifications were not always maintained with the hand 
receipts. Finally, responsible CIO stated they have created a "watch list" to track usage pattern 
but not abuse. 
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5. Please review the information in this memorandum report and provide written comments to 
our office by 6 Sep 02. [RSC exempt, AR 335-15, para 5-2e(7)]. Please provide corrective 
actions taken or planned, and target dates for implementation on each recommendation. In order 
to ensure we provide value-added services to our customers, we request you complete the 
enclosed customer satisfaction survey and mail it directly to the undersigned. 

6. We appreciate the courtesies extended to the auditor during the audit. If you have any 
questions or desire additional information concerning this report, please call Ms. Ada V. 
Campbell at (800) 359-8483, extension 464-8188 or (404) 464-8188; email--CampbelL@ usarc- 

emh2.army.mil. 





End qp^E^ANKJ.^NO 

Director, Anny Reserve Internal Review 
and Management Control Process 



we administer g§^toijn^^.^^(5^^| 3^ _ „ 
engagements. wouTa you please complete this survey 



Document 



aad return it to the Director, Army Reserve IR&MCP. 

The survey is designed to provide feedback on customer 
satisfaction and identify opportunities for improvement. 

The results of the survey are evaluated to determine 
whether any corrective action Is required to increase the 
effectiveness of future audit engagements and to aid in 
the continuous improvement of our services. 

Please complete and return this survey in the attached 
self-addressed envelope. 

Service Provided : Follow-up Audit of Cellular Telephones 
at OCAR, Report No. 2002-21 



Position 



1^2" '°JiJ^^lia/1 9/2006 
O Deputy Commander 

Chief of. Staff 

CXO 

Staff Director/Deputy 

Other 



Page 8 of 25 



D 
D 
D 

n 



Please indicate your agreement with each of the following statements by circling the appropriate number to the right of each 
statement. If you have any specific comments on these subjects, please include in space provided below. 

Strongly Agree Agree Neutral Disagree Strongly Disagree Not Applicable 
5 4 3 2 1 N/A 



IR services were: 

1. The audit objectives were clearly communicated and I was 
given the opportunity to have input to the audit. 

2- Theauditor(s): 

a. Communicated effectively throughout the review. 

b. Had good knowledge of the task. 

c. Were courteous, professional and displayed a positive attitude 
throughout the audit. 

3. This audit was completed in an acceptable time. 

4. Audit results were clearly, objectively and adequately reported. 

5. Audit recommendations were constructive and effective. 

6. The review was beneficial to my area. 

7. Will you request Internal Review services in the future. 

8. Did the auditors include me and/or my staff in the process, e.g. 
in establishing objectives and making recommendations 

that will correct the problems identified. 

Comments: 



[54321] 

[54321 
[54321 

[54321 
[54321 
[54321 
[54321 
[54321 
[54321 



[54321] 
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DAAR-CI 



So^^cSl^^ ^""^ '^''''*'''* ^^ ^"'"''' '"''^' ^'^'^^ ^^ Management 

SUBJECT: Response to Follow-up Audit of Cellular Telephones at OCAIL Amiv 
Reserve IR Report 24-00 (Report No. 2002-2 1 ) ^ / 

1 . The following information is provided in response to your memorandum dated 6 
August 2002, subject: Follow-up Audit of Cellular Telephones at OCAR, Array Reserve 
IR Report 24-00 (Report No. 2002-2 1 ). 

Response to FoUow-up Results Recommendation 1 : 

The C30 of ttue Army Reserve fomnlates teiecommunfcaao^ 

%eer^ireAjcmy Reserve* Ciui^ntly, there isno nccd^f^^ 

policy. The Army Reserve Command provides the telecommunications and automation 

support for the OCAR staff. The OCAR staff docs not receive its telecommunications 

and automation support from the Chief of Staff of the Army (HQDA DOIM). If the 

OCAR staff did receive its telecommunications and automation support Aom^the HQDA 

DOIM, it would fee required to follow Us policies. Ther^oi^il^ 

the Armj^ Reserve Gc^nmand'i eeUulcir tcSc^^ the policy let^ fe 

Response to Follow-up Results Recommendation 2 : 

Again, the CIO of the Army Reserve formulates telccommunica^ons and automation 
policy for the entire Anny Reserve. The Army Reserve Command provides the 
telecommunications mid automation support for the OCAR staff. Therefore^ the OCAR 
staff adheres to the Anny Reserve Commandos cellular telephone policy. 

Response to FoUow-up Results Recommendation 3; 

The OCAR CIO telecommunications personnel hand-receipt cellular tel^hones to each 
directorate's Information Management Advisory Group (IMAG) representative. The 
IMAG representative sub-hand receipts the cellular telephones to its users. The IMAG 
representative is responsible for issuing, tracking and maintaining its hand receipts lh£ 
OCAR CIO staff is not adequately staffed to issue and maintain sub^hand receipts for 
cellular telephones down to the user level. The division chiefs detcrmme whtch 
individuals within their respective directorates receive ^^^^^l^^^^f^^^^ 
mission requiremcms. The IMAG representauve issues a cellular telephone based on 
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division chiefs directive. The OCAR*s Director of Staff is the final approval authority 
on telecommunications end automation issues at OCAR, 

the OCAR CI© is curroitly re^ewm^ paitena^ ffllsb^ data 

leceivedljyowr cellular tdej^^ cuitentlym an Adobe J?E)3? fife. Whicli is 

not a searchablc/mamptdMve format A contractual limitation prevents ihe vendor from 

providing the call data in a searchable/manipulative format, rllie sunmiaiy d^ 

i;^ ma^EU^ into an feccci ^e^^ to quickly 

i^^f^ p<^ntie! ^o are CKceoimg their rnpntyy %]i p^ 

^ deten^ntne^^^ 

pages); the clata ne^ to beln a sesail^^ If notin thi$ ScarehabJe 

^>^mal»U^vouI4 require a d^ Wc«k wiffiihe d^taai^ 

the nw^ary reports. Cuacntly, the OCAR C! staff is riot ad«iuatclystaiTed^^^^ 

manually input tiie itemized call data. 

2. If you have any questions or desire additional iirformation concerning this report, 
please call LTC Arthur Spearman at (703) 601-0696 or email at 
arthur.speannan@ocar.anny.pentagon.mil. 




(i?^v#" 



Ends Ji\MESR.HILLm 

COL. SF 
Deputy Chief Infotmaiion OfTiccr 
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DEPARTMENT OF THE ARMY 

HEADQUARTERS, UNITED STATES ARMY RESERVE COMMANt> 

i40^ DESHLER STREET SW 

f=OftT MCPHCRSON, GA 30330-1000 

RSPLYTO 
ATTtKnOW OF 

1 *DFC ?20D 
APRC-CIS (25) 



MEMOIL^NDUM FOR 

Commanders, USARC Major Subordinate Commands and Installations 

USARC Dircclors^/Chiefs, Coordinating, Special, and Personal Staff Agencies and SGS 

SUBJECT: U.S. Army Reserve Conimand Policy on the Use and Safegijarding of Government 
Issued Cellular Telephones 



1. References. 

a. AR 25-1. Cliaplcr 6, paragraph 3, Anny Information Management, 15 Feb 00. 

b. USARC Regulation 25-1, Chapter 6, paragraph, 0-8, Infomiation Resources Management 
Program, 1 Feb 97. 

c. USARC Regulation 25-10, Chapter 2, paragraph 2-7, Telecommunications Management 
Program, 1 Feb 00. 

d. USARC Memorandum 25-1, Staff Officers Handbook, 1 Mar 98. 

2. Applicability. This policy memorandum applies to the Headquarters, U.S. Army Reserve 
Command (USARC), and all units, organizations, and installations assigned to the USARC. 

3. Tills policy memorandum supersedes USARC memorandum, AFRC-IMO, Cellular 
Telephone Policy, S February 1997, This memorandum, along wiUi above listed references, 
provides policy and information on the use of government issued cellular telephones. Upcoming 
revisions lo USARC Regulation 25-1 and 25-10 will include these policies. USARC 
Memorandum 25-1 will contain tliose portions applicable only to USARC Headquarters staff. 

4. Policy- 

a. Government owned or leased cellular telephones will be distributed for the sole purpose of 
allowing the user to make missiyti critical telephone calls where no otlicr means of voice 
communication is available. 



Efdt I ± 
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b. If reasonable access lo a regular (Class A) telephone (other than wireless) is available, ilic 
regular Iclcphone will be used in lieu of a cellular (elephonc. 

c. In accordance with Pari 47 of the Code of Federal Regulations Section 22.925 and Federal 
Communications Commission Public Notice CL- 1 42 do not use cellular telephones on fixed 
wing aircraft, rolary wing aircraft, balloons, or any other type of aircraft while airborne, 

d- Cellular telephones will not be issued as a supplement to tactical and non-tactical 
communications. 

e. Cellular telephones arc billed based on airtime use for both incoming and outgoing calls 
tlierefore all calls must be for official use only, of reasonable duration, and in the best interest of 
the govemmeni. Calls will be limited in length to the following standards, 

(1) CcUular telephones without prepaid blocks of time* With the exception of absolutely 
mission critical communications and persomicl safety, cellular telephone calls will not exceed 
ten minutes in duration. Minimize all calls whenever possible. 

(2) CeKular telephones with prepaid blocks of time. Calls from cellular telephones that 
have prepaid blocks of time contracted with the service provider are limited to the number of 
minutes that are provided under the contract. Minimize all calls whenever possible and do not 
exceed the prepaid block of time. 

f. Cellular telephones arc not secure. Classified infonnation will not be discussed while 
using a cellular telephone. If any party begins to discuss classified information, advise the party 
that they cannot discuss classified infonnation over a cellular telephone. If the party continues to 
discuss classified information, end the telephone call and report the incident to your COMSEC 
olTiccr. 

g. Ccllxilar telephones will be issued using DA Fonn 2062, Hand Receipt/ Annex Number or 
authorized substitution. Recipients will be provided a copy of tliis memorandum and any other 
applicable local policies. Recipients will sign an acknowledgment verifying tJiat they have read 
and understand Uiis policy memorandum. Written requests and justifications will be filed with 
the original hand receipt (file// 25- 1 x). 

h. Cellular telephones, regardless of how equipped (to include hands-free kits), will not be 
used to make or receive calls while driving a motorixcd vehicle. A cellular telephone call will not 
be answered until the vehicle is slopped and it is safe lo make and receive calls. Vehicles will 
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not be placed in motion until a cellular telephone call has been completed. Similarly, voice mail 
will not be checked, the Internet will not be used, or otlicr special features of cellular telephone 
will no! be used while a vehicJc is in motion. 

i. The scivicing DCSlM or Installation DOIM will review and revalidate the need for cellular 
telephones at least every 2 years. 

5. Cellular Iclephonc users will take all the necessary precautions to ensure the equipment is not 
lost, stolen, or used for unofficial purposes. If a cellular telephone is lost or stolen notify your 
supporting Infonnation Management Officer uiunediatcly to terminate services and initiate 
appropriate investigation, 

6. Telephone Audit Procedures. 

a. At the USARC Headquarters a CIO ISS Telecommunications Division representative will 
validate the bills for payment by the CIO Financial Management Office. Copies of the bill will 
be sent to tlie individual cellular telephone holder to verify that calls arc official. Copies of 
verification will be maintained in the CIO ISS Telecommunications Division in accordance with 
AR 25-400-2, Modem Army Recordkeeping System (MARKS), file nunjbcr 25- Ix, 
Communications Accounts. 

b. RSC, DRC, and installation DOIMs will establish similar procedures for tlieir commands. 

7. Procedures for requesting a cellular telephone. 

a. Requests for cellular telephones will be submitted through the supporting RSC» DRC, or 
installation DOTM, as appropriate, for review and approval. Include a justification statement as 
to why the cellular telephone's) is or are required, 

b. UQ USARC staff members who wish to have a cellular telephone will use the enclosed 
Cellular Phone Request form (AFRC Form 87-R (Test)). All staff member requests will be 
submitted tlirough their slafTprincipal for review and approval. Forward the compleied form to 
the TeleconuDunications Division, US AR CIO ISS, ATTN; AFRC-CIS-NT for approval and 
procurement. 

c. The test period for AFRC Form 87-R (Test) will expire when the final version is published 
in a revision to USARC Memorandum 25-1 . The fonn can be found on the HQ LAN in 
FoiTnflow fisnnat at; "\\usarcshared\rcadonlyV\fonm\afrc\afrc87r-frl" and is for HQ staff use only. 
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S. This policy memorandum is punitive in nature. Violation of this policy memorandum could 
result in any or all of the following sanctions: loss of use or limitations on use of cellular 
telephones, disciplinary or adverse actions^ criminal penalties, and employee being held 
financially liable for the cost of unauthorized use, 

9. For further information regarding this policy contact LTC Mallian Ennis> Chief, 
Tdeconuiiunications Division at 404-464-9385 or the USAR CIO ISS Plans and Integration 
Division at (404) 464-9374, e*mail: Ramos3r@usarc-emh2.amiy.miL 




vJ5 
Enci THOM AS C. MAIELLO. JR, 

Colonel. GS 
Aimy Reserve Chief Information Officer 

CF: 

CDR, ARPERSCOM, AITN: AFRC-CIP» 1 Reserve Way. St. Louis, MO 63132-5200 

OCARCIO, 1421 JelTerson Davis Highway. Suite 1 UOO, Arlington, VA 22202-^3259 



IVlV^l-M ill 
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OFFICE OF THE CHIEF, ARMY RESERVE 
1421 JEFFERSON DAVIS HIGHWAY 
ARLINGTON, VIRGINIA 22202-3259 



A|)Wt>tlSTrtATiyE MEMQRAI40UM No. 
November 1997 



19 



No. 25-98-1 



Information Management 
USE OF OCAR COMMUNICATIONS RESOURCES 



1. This Administrative Memorandum supersedes OCAR Administrative 
Memorandum No. 25-96-08, 26 April 1996, Subject: Telecommunications 
Equipment Usage. 

2. PURPOSE: This memorandum establishes policy, procedures and 
responsibilities for the use of communications resources within the Office, Chief 
Army Reserve (OCAR). The purpose of this policy is to safeguard OCAR data 
and resources and reduce unnecessary risks to OCAR managed 
communications resources arising from abuse and misuse of these resources. 

3. REFERENCES: 

a. DoD 5500.7-R (Joint Ethics Regulation), 30 August 1993 (w/Change 2. 
25 March 96), Para 2-301. 

b. AR 25-1 , 25 March 1997. Subject: The Army Information Resources 
Management Program. 

c. DA Pam 25-1-1. 27 August 1991, Subject: Installation Information 
Services. 

4. POLICY: OCAR communications resources are for Official Use and 
Authorized Personal Use only. The following policy for use of OCAR 
communications resources is established for all OCAR employees: 

a. OCAR communications resources include electronic, electromagnetic^ 
and optic light signals used to transmit or receive information between two or 
more points by means of owned/leased radio, wire, cable, satellite, fiber optics, 
or other electronic media and the devices which provide this capability. These 
devices include telephone; cellular phone; pager; non-tactical radio; facsimile; 
personal computer using modem, switch, router, and/or any other component of 
systems supplying transmission services (e.g., local area network. Internet, 
electronic-mail, etc.). 



£/\JeJ A 
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b. "Official Use" includes all communications that are necessary in the 
interest of the Federal Government. 

re^soHipfeJfy ma 

spouse or children; maki og ii^iGal^ at^ 

appqir^tments; makirtg bri^lnjterh^t searches; e:m 

relatives; an^rnakingdecjtrprite ban 

commurtcations by a Government empoyeie in an pfRbiM 1^^ status Iq 

^pproprlaileJnctividuals, lb not^ Personal use l3 

authortzect when it: 

(1) Does not adversely affect the performance of official duties by the 
employee or the organization, 

(2) Is of reasonable duration and frequency and, whenever practicable, 
made during the employee's personal time, such as before or after duty hours 
or during a meal or other break period, 

(3) Serves a legitimate public interest such as keeping employees at 
their desks, furthering their edudalion, enhancing technical or professional 
skills, or assisting in job searches in response to downsizing. 

(4) Does not involve illegal activities, uses contrary to Government 
regulations, uses that would reflect adversely on OCAR or the Department of 
Defense or any other use incompatible with public service. 

(6) Does not overburden any Government communications or 
computer system. 

(6) Does not create significant additional cost to the Government. No 
toll or other usage fee may be charged to the Government, even if the individual 
intends to reimburse the Government for such use. Toll-free numbers may be 
used. For communications requiring tolls or fees, charges must be reversed, 
made against a personal credit or debit card, pre-paid calling card, or other 
personal calling card billed to the user. 

d. Supervisors must monitor employee use of communications resources 
to ensure that policy guidance is followed. Supervisors may further restrict or 
revoke authorized personal use of Government communications resources, for 
any perceived misuse of resources. 

e. The OCAR Local Area Network (LAN). As a Government 
communications resource the LAN is subject to the same restrictions as other 
media. Due to the nature of the electronic mail feature of the LAN some 
additional examples of restrictions, as well as an authorized capability, are 
provided below. 

(1 ) Users are restricted from sending chain letters, group e-mailings to 
offer items for sale or for other personal purposes, harassing another person by 
sending or displaying uninvited e-mail of a personal nature, using lewd or 
offensive language in an e-mail message, or using another person's account or 
identity without permission. 

(2) An "Unofficial Bulletin Board" has been established for the use of 
all OCAR personnel- This bulletin board may be used to post items for sale, 
announce social events, etc. It may not be used for solicitation of business or 
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engaging in other activities in support of private business enterprises; 
partisan political or religious activity; or lobbying, advocacy, or fundralsing 
activities on behalf of any organization. Questions concerning proper use may 
be forwarded to the Information System Security Manager ISSO). 

f. The Internet. This immense resource for information interchange and 
communications poses special hazards and potential for abuse of Government 
resources. Authorization is granted to use OCAR communications resources to 
access the Internet for both official and personal use as follows: 

(1) Official use includes official communications, research, or 
professional development/education, as long as this access relates to the 
mission of the DoD. 

(2) Authorized personal use is under the restrictions stated in 
paragraph 3c above. Some examples of authorized personal use include 
sending and receiving brief personal e-mail messages to family, friends, and 
co-workers when such communications are most reasonably made during 
working hours and do not affect productivity or interfere with Government 
operations in any way, conducting Internet searches, or viewing Internet news 
services. 

g. Restrictions specifically applicable to the Internet include the following; 

(1) Participation in "chat lines" or other forum discussions for other 
than official business. 

(2) Accessing "Hacker" sites and/or downloading "hacking" tools, 
unless the user is specifically authorized to do so as part of the users official 
duties. 

(3) Interfering with the functioning of any system or with any other 
person's use of a system by the number or frequency of e-mail messages 
("spamming"'). 

(4) Using another person's account or identity without permission, for 
example, by forging e-mail. 

(5) Viewing, damaging, or deleting files or communications belonging 
to another person without permission. 

(6) Uploading information onto or altering a web site owned by another 
person or organization without permission of the web site' s owner. 

(7) Attempting to circumvent or defeat any security or auditing system 
without prior authorization and other than as part of legitimate system testing or 
security research. 

(8) Obtaining, installing, storing, or using software in violation of any 
patent, copyright, trade secret, or license agreement. 

(9) Storing or transmitting any copyrighted materials (including 
iliustrations) without permission of the copyright owner. 

(10) Permitting any unauthorized person to access a DoD owned 
system. 



fiIe://C:\Documents%20and%20Settings\BATTE\Local%20Settings\Temporary%20Inter... 04/21/2004 



iriK^iy 1 JLl 



Case"t:&&-cv-(yd884-JDB Document 1 3-2 Filed 1 0/1 9/2006 Page 1 8^^25^ 



h. Downloading Materials from the Interact. Any downloaded material, 
from any source, must be scanned using anti-virus software before it is opened 
or executed. This includes sound and video files, as well as files transmitted 
via e-mail. Compressed files should be scanned again after being 
decompressed. No download files will be loaded or installed directly to a 
network or shared drive without permission of the ISSO. 



i. Use of Government communication resources is with the understanding 



that: 



(1 ) Use of such resources serves as consent to monitoring of any type 
of use, including personal uses whether authorized or unauthorized. 

(2) Use of such resources is not anonymous. For each use of the 
OCAR LAN and Interact, the name and computer address of the user can be 
recorded, as well as the locations accessed by the user. Interact access via 
DoD networks are monitored 24 hours a day. seven days a week and any 
Internet session may be monitored in its entirety. 

(3) Employees will not disclose communications system access data 
{such as passwords) to anyone, unless such disclosure is authorized. 

(4) Employees must use sound judgment when iconsidering the use of 
e-mail for the transmission of sensitive information or other valued data. 
Information transmitted over an open network, such as LAN e-mail, the Internet, 
telephone or fax, is accessible to anyone else on the netj/vork. Information 
transmitted through the Interact or by e-mail is accessible to anyone in the 
chain of delivery, and may be re-sent to others by anyone in the chain. 

5. The proponent for this policy is the Information Management Division. 



MAX BARATZ 
Major General, USA 
Chief, Army Reserve 

OFFICIAL; 

(/SI/ 

NORMAN P, GOTTLIEB 

COL, GS 

Executive Officer 

DISTRIBUTION: 

All Division/Offices (OCAR/ARSC) 
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Acceptable Use Agreement 

For 

Office Chief Army Reserve Wireless Telecommunication Systems 

This document provides guidelines for the use of OCAR Wireless Systems located at or operated by 
Office Chief, Army Reserve personnel. These are minimum guidelines for use and do not exempt users 
from further restrictions that may be imposed by this Command. The scope of this document includes all 
telecommunication devices, to include but not limited to, OCAR cell phones, pagers, Blackberry/RIM two- 
way messaging handhelds, personal digital assistants (PDA), and Secure Telephone Units (STUs) or the 
Secure Terminal Equipment (STE). The purpose of the below guidelines are to ensure that all users 
operate telecommunication devices systems in an effective, efficient, ethical, and lawful manner. 

The "user" is an OCAR employee requesting issued wireless devices in order to perform work in support 
of OCAR or a project authorized for OCAR and includes civilian, military, and contract employees. 

OCAR wireless systems are to be used for authorized purposes only. Unauthorized use is a violation of 
the Uniform Code of Military Justice, Army regulations or policy, or DoD directive. Penalties include loss 
of use or limitations on use of equipment or services, disciplinary or adverse actions, criminal penalties, 
and employees being held financially liable for the cost of unauthorized use. 

As a user of the Office Chief Army Reserve (OCAR) Wireless System, I acknowledge my responsibility to 
conform to the following requirements and conditions, 

1. I understand that failure to sign and abide by this agreement could result in denial of access to OCAR- 
ESA. 

2. I understand that I will not introduce, store, pass, or process classified data on any Wireless device 
issued to me by OCAR-ESA personnel. 

3. I have read and understand my responsibilities and restrictions, as listed below, and agree to abide by 
them. I will: 

> tslot use any wireless telecommunication device for any classified data. 

> Not conduct or perpetuate an illegal act while using any wireless device, nor any activity that 
can discredit, inhibit, impair, or disrupt the mission/s of OCAR, Prohibited conduct also 
includes activities that may reasonably be expected to cause embarrassment or bring discredit 
to the user, the Office Chief Army Reserve, or U.S. Government. 

> Limit use of the wireless device for unclassified, official government business, and those 
authorized purposes as set forth in DOD 5500. 7-R. Government access to WWW sites with 
BlackBerry devices is permitted to obtain professional literature that is job related; acquiring 
public domain information of value to the organization; to send official U.S. Government 
E-mail; to correspond with learning institutions for job-related continuing education purposes; 
and for other official government business. 

> Immediately report to my lA Representative any known or suspected intrusions or violations 
of the security policies. 

> inform the supporting Automation Help Desk whenever a wireless device appears to be 
malfunctioning or is lost or stolen. Users will take all the necessary precautions to ensure the 
equipment is not lost, stolen, or used for unofficial purposes. 

> Contact the lA Representative prior to departing or after changing organizations to ensure 
appropriate transfer of any and all telecommunication devices. 

> Government owned or leased cellular telephones are distributed for the sole purpose of 
allowing the user to make mission critical telephone calls, when no other means of voice 
communication is available. 

> Army policy permits communications monitoring or recording provided that the information to 
be acquired is necessary for the accomplishment of the Army mission. 
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> Celiufar telephones will not be used in lieu of established "wired" telecommunications 
network. 

> Commercial cellular phones, alleged to be secure are not authorized for classified or 
sensitive communications. 

V Per the Decision of the U.S. Comptroller General B-21 7996, 65 Comptroller General 19 
(October 21 , 1 985) provides authorization to verify cellular telephone bills by use of statistical 
sampling and analysis to determine call are official in nature for the purpose of collecting 
payment for all unofficial calls. (AR-25-1 , 6-3 paragraph f(1 }) 

> Cellular telephones, regardless of how equipped (to include hands- free kits), will not be used 
to make or receive calls while driving a motorized vehicle. A cellular telephone will not be 
answered until the vehicle is stopped and it Is safe to make and receive cails, 

4. I understand that all OCAR telecommunications and automated information systems are subject to 
monitoring for the purpose of ensuring proper functioning, to detect and protect against improper^ 
unauthorized, or illegal use or access, to verify the presence or performance of applicable security 
features or procedures, and for like purposes. Such monitoring may be done by System Administrators, 
system security officers, or law enforcement personnel, and may result in the acquisition, recording, and 
analysis of ail data being communicated, transmitted, processed or stored in this system by a user. If 
monitoring reveals possible evidence of criminal activity, such evidence may be transferred to or collected' 
by law enforcement personnel. I understand that my use of the system, authorized or unauthorized, 
constitutes my consent to such monitoring, whether such monitoring was initiated or requested by 
Systems Administrators, system security officers, or law enforcement personnel. I also understand that 
my use of the system, authorized or unauthorized, constitutes my consent to any resulting acquisition, 
recording, analysis, transfer, or collection of data or evidence, whether such acquisition, recording, 
analysis, transfer, or collection of data or evidence was initiated or requested by Systems Administrators, 
system security officers, or law enforcement personnel. 

5. 1 acknowledge my responsibility to notify my Information Assurance Security Officer in the event that I 
change offices, leave the OCAR, or no longer require access to wireless telecommunication equipment. 

6. I acknowledge my responsibility to conform to the requirements set forth in this agreement and 
acknowledge that 1 will abide by all applicable policies, i also understand that failure to comply may result 
in denial of access to OCAR networks or AIS, and that, if necessary, such violations will be reported to the 
proper authorities. 

> Your Information Assurance Security Officer is: MSG Farris Allread Phone: 703-601-0806 

> Your Information Assurance Manager is: MAJ Jerome Davis Phone: 703-601-0808 

> Your Telecommunication Systems Analyst Is Mr. Art Berstis Phone: 703-601-0666 

M hereby acknowledge that I have read and will abide by this Acceptable Use Agreement For 
Office Chief Army Reserve Wireless Telecommunication Systems 

User's Printed Name: Phone Number; 

Organization/Section : 

User's 

Signature ^_ _Daie: 
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Campbell, Ada V Ms USAR IR 



From: 
Sent: 
To: 
Subject: 



Devine, Dawn MAJ (OCAR-ZD) 
Monday, March 15, 2004 3:14 PM 
Campbell, Ada V Ms USAR IR 
FW: Scanned docunnents 



Scanned_.pdf (150 
KB) 

Ms. Campbell, attached is the response to our Second follow-up audit of cellular 
telephones at OCAR (IR Engagement No. 2003-090) > Please let me know if you need the 
original sent to you. 

v/r 

MAJ Dawn DeVine 

Telephone Control Officer 

Office of the Chief, Army Reserve 

703-601-0913 
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DAAR-ZD 



MEMORANDUM FOR Commander, US Army Reserve Command (DAAR-IR), 
1401 Deshler Street, SW. Fort McPherson, GA 30330-2000 

SUBJECT: Second Follow-up of Audit of Cellular Telephones at OCAR (IR 
Engagement No. 2003-090). dtd 12 Feb 04. 



1 . Purpose. This memorandum provides description of corrective actions taken 
or planned, and target dates for implementation on each recommendation to the 
above referenced audit. 

2. General. OCAR has appointed a Telephone Control Officer (TCO) as of 23 
Feb 04 to assist in conducting corrective actions, implement audit 
recommendations and provide checks and balances to eliminate future 
discrepancies/ A mandator/ class is being developed to review/u^ate han<l 
receipts, sign usage agreements and discuss red flag^ and procedlures for 
reimbursement of unauthorized calls. The class will be completed by the end of 
Marc* 2004. 

3. Background. The following three audit recommendations will be addressed 
as follows: 

a. Monthly cell phone t^iMre^ by TCQ lb> detonnine employees 
exceeding their monthly celt plans and potential unauthorized use. 

(1 ) Gd^fSe^elt^^ In^im a^istance is being provided 

by the OCAR Telecommunication Systems Analyst by conducting red flag 
reviews, as necessary (outlined in AR 25-1 , Chp 6-3). Currently this duty is not 
included in the ESA contract and therefore can only be conducted when 
iilkaipxtf^ar ^ i^^siJaSjte^ ai a iimkiwro^ on^ |»^ quarter Deleqatinq that 

{ay Red Ffeigs have been established as: 

* Calfe ejoceediiig It) m^^^ 

• Totel monthly minutes exceeding monthly billing plan 
-^^^iili^mfeiirii 



Case 1 :06-cv-00884-JDB Document 1 3-2 Filed 1 0/1 9/2006 Page 23 of 25 



DAAR-ZD 

SUBJECT; Second Follow-up of Audit of Cellular Telephones at OCAR (IR 

Engagement No. 2003-090), dtd 12 Feb 04. 



(b) Manpower staff study to be forwarded to CofS outlining justificatidii 
of relevant duties to support a TCO NCOIC. 

(c) Certification for TCO pending training availability. 

(2) Target date for impjennentation : Immediately. ESA will conduct initial 
review, for 2nd quarter (Jan-Mar 04) and report findings to the TCO NLT 1 Apr 
04. Provide Directorate Chiefs with a monthly PDF file starting 1 May 04 to 
assist in conducting detailed reviews of systems assigned. Status report format 
to be disseminated within directorate guidance outlined below. Reports will be 
managed by suspense and reviewed by the TCO. 

b.Pr6yiciie^ monthly celM telephone bills to employees for use 
certifica&on. 

(1) Corective action planned . 

(a) Provide monthly cellular telephone bills (PDF file) to Directorates, 
or authorized representatives for use certification. Breakout for each individual 
can be requested on a case by case basis or as necessary per AR 25-1, 

Chp 6-3. 

(b) Develop Directorate Guidance outlining supervisory responsibilities 
of all cell phone or blackberry users under their authority. 

Accountability 

Hand Receipt Updates 

Review of Quarterly Usage 

Submission af status rir^^ 

Procedures for reimbursement of unauthorized calls 

Suspension of privileges 

Change in usage plans 

Change in requirements (increase/decrease) 

(c) Require all Directorates to provide justification for each assigned 
cell phone or blackberry wireless systems by position. Include low, med or high 
usage requirements. Recommendations for increased or decreased assigned 
systems will be included by position. Sample t^^mplate to be developed and 
distributed in staff guidance. 

. , ^ M^u.tt^ ^,l:;:|iliM .p^fjgll^^uspfs l^jraiwrt i^s®^^ - j i ^ 

scheduled and comply with all reqtiirei^Tefits ot^lried ^feove- 
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(2) Target date for implementation : NLT 1 Apr 04. 

G^liunauthpriz0d calls are 
the enrtployee reimbursa tilie'go^^infi^^^ unauthorizJ^^aH^ 

(1) Corrective action planned . Develop procedures for implementation 
and collection. Include procedures in Directorate guidance and OCAR policy. 

(2) Target date for implementation . NLT 1 Apr 04. 

4. The POC for this memorandum Is MAJ DeVine, 703-601-091 3. 




LTC, GS 

Director of Staff Management 
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Follow-up " USAAA Audit of Causes for Financial Discrepancies. Report No. 
2003-089. Our objective was to determine If stated corrective actions to 
recommendations contained in the USAAA Audit of "Causes for Financial 
Discrepancies," [SARSS], USAAA Report No. A-2002-0260-AML, 29 Mar 02, were 
implemented and if actions taken eliminated problems identified In tlie report. We 
concluded the USARC DCS, G-4 implemented the corrective actions and effectively 
conrected reported problems identified In the subject USAAA audit report. 

Second Follow-up - Cellular Telephones atOCAR. Report No. 2003-090 . Our 
cfcjective was to detemiine whetlier Enterprise Services Acti>rtty (ESA) tool^ conrective 
action to implement the one open recommendation contained in our First Follow-up 
Report No. 2002-021, dated 6 Aug 03. We concluded corrective actions have not been 
implemented. Because of the problems identified during this follow-up audit, we made 
three additional recommendations. We will follow-up to detemdine if the additional 
recommendations have Implemented during, our planned Audit of Cellular Telephones in 
CY 04. The OCAR Director of Staff Management agreed with our recommendations. 

Follow-up - Financial Management Practices for the Readiness Training 
fREDTRAIN) Program. Report No. 2003-091. Our objective was to detennine 
whether the Southeastern Arniy Reserve Intelligence Support Center (SE ARISC) took 
adequate corrective action to implement the one open recommendation contained in our 
Follow-up Report No. 2002-14. dated 24 July 02. We concluded adequate conective 
action was taken to fully implement the one recommendation. 

Follow-up ■ ESA Contract Acguisltion Management. Report No. 2003-092. 
Our objective was to detemiine whether the ESA took corrective action to implement the 
one open recommendation contained in our Follow-up Report No. 2003-08, dated 
24 Apr 03. We concluded adequate corrective action was taken to fully implement the 
recommendation. 

Eoulpment Readiness. 77th RRC. Report No. 2003-023. 63d RRC. Report No. 
2003-058. 88th RRC. Report No. 2003-078. The objective of the audit was to 
determine whether guidance and controls were in place, followed by RRCs, to ensure 
equipment readiness met reporting standards in accordance with Army Regulation 700- 
138 during FY 03 In the Arniy Materiel Status System (AMSS). We visited three RRCs 
and found equipment readiness needed improvement. Specifically, the RRCs need 
better controls to ensure: (i) leadership at all levels place more effective emphasis on 
maintaining and reporting equipment readiness, (11) Maintenance Officers and 
Technicians, Unit Level Logistic System-Ground Operators, and Property Book Officers 
property track and reconcile the reportable items' records to accurately reflect AMSS 
reporting and, (iii) equipment receives timely scheduled maintenance services and 
Preventive Maintenance Checks and Services. The three RRCs Commanders agreed 
with our three recommendations and were taking corrective actions during the audit. 



